$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debb647b-be5a-3ec9-8894-bc03d616d417.roa File: debb647b-be5a-3ec9-8894-bc03d616d417.roa (raw, json) Hash identifier: 8X/LyqHw6dap0yp0jAqdLWtht7Eo7n4Zq2A+CKbr5Y4= Subject key identifier: CC:BC:C8:D3:BC:59:51:63:10:41:0B:C8:36:3F:E7:55:FF:26:6A:16 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B328C4A7D7574511F866425C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debb647b-be5a-3ec9-8894-bc03d616d417.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 12243 IP address blocks: 2001:470:3b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:4a:7d:75:74:51:1f:86:64:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=201036e3-f7e3-4ba2-ba9b-8aac77912600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b6:f0:28:a4:d2:a1:d5:98:3a:be:98:e8:4d: cb:bf:32:c4:7b:3d:48:fa:d5:05:48:93:42:62:74: 53:42:df:9e:b2:a7:b1:77:c8:81:58:36:ff:d3:72: ed:c7:a3:db:7f:10:c3:1a:4f:6e:4f:e8:f4:74:ac: a7:5a:af:5c:5d:5a:5a:7b:d2:ae:b9:e4:57:e7:36: f1:f2:e4:65:3f:5f:a4:da:4c:70:ba:41:be:95:bd: 2e:4c:e4:13:e9:34:07:2e:23:df:53:5e:5d:b0:d6: fe:a0:1d:97:69:0e:21:9d:92:c9:35:c8:d8:f1:f9: 60:1f:8e:13:87:b3:37:02:cb:bd:dc:be:2a:04:e9: 5a:8f:7b:ee:06:0a:bd:64:c5:42:4d:f9:fd:cf:7b: 2c:a0:20:cb:11:94:c9:ab:bd:39:c7:23:17:a7:91: 7a:d9:a3:8d:72:ef:e5:88:83:df:a4:40:f7:f1:ee: 65:50:83:41:a8:d6:0d:77:8b:88:64:ff:70:2e:fa: b7:63:1f:64:f6:f0:bf:fb:20:15:d0:72:de:21:6d: c8:b1:06:9a:c0:c3:56:29:e7:37:59:7a:ed:dc:d5: 65:ef:8b:23:2f:09:b5:ce:79:23:97:f3:ec:7b:33: 9e:d5:23:d3:78:ec:ad:07:6d:f3:9d:fc:43:96:86: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BC:C8:D3:BC:59:51:63:10:41:0B:C8:36:3F:E7:55:FF:26:6A:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debb647b-be5a-3ec9-8894-bc03d616d417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:73:ec:d8:ba:84:27:d5:d5:b1:a7:a5:49:f9:ae:41:f8:32: 17:4e:b4:40:35:63:bc:f0:34:48:d9:0e:0e:71:03:a8:c0:39: b2:f9:bf:59:e1:00:0f:ad:c4:cc:c5:90:dd:31:3e:61:87:56: 92:f7:da:07:0c:e7:b8:83:fc:95:f8:d8:a6:ad:f0:87:33:2e: d7:ee:67:32:83:66:c6:81:c5:54:d7:6a:5f:e7:41:0d:0c:c4: 1a:4f:ce:0d:ef:54:a1:ab:ba:7d:96:16:2a:ae:fa:a1:a0:a9: 30:3b:f8:73:db:41:62:d8:77:41:b7:0d:f8:89:9b:18:3e:e0: fb:c5:2c:84:e9:c1:1e:88:dc:6d:9d:b3:d9:e0:82:3e:84:a1: c2:29:5c:f6:98:22:84:33:b1:6a:a0:e8:20:3f:44:7e:86:cc: 4b:27:1d:02:3e:44:d1:54:92:af:4e:8f:89:10:f7:c3:6b:d3: b1:bd:84:8b:00:a0:83:8a:e7:a9:5d:04:20:dd:8b:02:cc:ac: a7:0e:9b:f9:05:11:8b:f5:ba:13:5b:aa:9a:78:b0:6f:da:4d: fb:da:f3:00:00:ea:84:51:d8:d6:63:17:1b:3f:6c:f1:e5:59: 6a:a8:5e:fd:34:f4:54:ca:a8:28:24:7c:1c:57:de:df:ec:bf: 90:85:bd:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsyjEp9dXRRH4ZkJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MjAxMDM2ZTMtZjdlMy00YmEyLWJhOWItOGFhYzc3OTEyNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7bwKKTSodWYOr6Y6E3LvzLEez1I+tUFSJNC YnRTQt+esqexd8iBWDb/03Ltx6PbfxDDGk9uT+j0dKynWq9cXVpae9KuueRX5zbx 8uRlP1+k2kxwukG+lb0uTOQT6TQHLiPfU15dsNb+oB2XaQ4hnZLJNcjY8flgH44T h7M3Asu93L4qBOlaj3vuBgq9ZMVCTfn9z3ssoCDLEZTJq705xyMXp5F62aONcu/l iIPfpED38e5lUINBqNYNd4uIZP9wLvq3Yx9k9vC/+yAV0HLeIW3IsQaawMNWKec3 WXrt3NVl74sjLwm1znkjl/PsezOe1SPTeOytB23znfxDloZ51QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMy8yNO8WVFjEEELyDY/51X/JmoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGViYjY0N2ItYmU1YS0z ZWM5LTg4OTQtYmMwM2Q2MTZkNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAlz7Ni6hCfV1bGnpUn5rkH4MhdOtEA1Y7zwNEjZDg5xA6jAObL5 v1nhAA+txMzFkN0xPmGHVpL32gcM57iD/JX42Kat8IczLtfuZzKDZsaBxVTXal/n QQ0MxBpPzg3vVKGrun2WFiqu+qGgqTA7+HPbQWLYd0G3DfiJmxg+4PvFLITpwR6I 3G2ds9nggj6EocIpXPaYIoQzsWqg6CA/RH6GzEsnHQI+RNFUkq9Oj4kQ98Nr07G9 hIsAoIOK56ldBCDdiwLMrKcOm/kFEYv1uhNbqpp4sG/aTfva8wAA6oRR2NZjFxs/ bPHlWWqoXv009FTKqCgkfBxX3t/sv5CFvWI= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:43 2025 by rpki-client